PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Oops, I Weaponized the Database: Abusing AI Features in SQL Server 2025

specterops.io | blog | #ai-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

SQL Server 2025 AI features can be abused for data exfiltration, NTLM coercion, and C2 traffic. See how attackers exploit them and how defenders can respond.
Published
Collected

Related coverage

blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · about.gitlab.com
What happens when vulnerabilities are discovered faster than you can fix them?
AI is changing how quickly vulnerabilities can be discovered and exploited. The next challenge is bringing that same speed to remediation and prevention
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · about.gitlab.com
Extend GitLab Duo Agent Platform into your business systems
Learn how to call a custom GitLab flow from Salesforce so every error arrives as a GitLab issue with root-cause analysis, ready to fix and deploy.
blog · aikido.dev
AI agent security in Kubernetes: Why prompt injection isn't the right term
This post is based on Mackenzie's conversation with Abdel Sghiouar on The Secure Disclosure podcast. Listen to the full episode or watch below.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
Back